Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2022-50589

SuiteCRM < 7.12.6 SQL Injection via 'export' Functionality

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality. Successful exploitation allows remote unauthenticated attackers to ultimately execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SuiteCRM SuiteCRM

Default version status: unaffected

  • 0 to < 7.12.6affected
pkg:github/SuiteCRM/SuiteCRM

References